Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
File:                     cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json)
Hash identifier:          8vVEBus4DFaq/EggdSpWx6QRkg3OKiFo4940b+Cy7hs=
Subject key identifier:   77:F3:8F:38:14:66:12:FC:44:EA:6F:0B:56:7B:40:63:E0:53:84:10
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Certificate issuer:       /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
Manifest number:          019F
Signing time:             Fri 31 Jan 2025 02:42:25 +0000
Manifest this update:     Fri 31 Jan 2025 02:42:24 +0000
Manifest next update:     Fri 07 Feb 2025 02:42:24 +0000
Files and hashes:         1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: XxEBsV8Gnxa0+thKVJKtYiWR7TWEkswZCsM9s+lVriU=)
                          2: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: KwJcRfcCHNm1/1H4hZVLWjzBmRVSuYEae2GuTglAJm0=)
                          3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: n2zLDtDaPNL3Ye6qBkwU/zpDC2mfhiqQ0N3aGF+8gOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
        Validity
            Not Before: Jan 31 02:42:24 2025 GMT
            Not After : Feb  7 02:42:24 2025 GMT
        Subject: CN=679c3891-cf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:1c:39:f9:89:36:02:80:14:5f:1f:14:df:
                    3e:61:28:db:06:8d:b4:34:44:5a:eb:52:62:22:95:
                    29:bb:15:6b:60:ec:7d:4b:63:7c:94:03:f7:45:69:
                    e2:e7:d2:5a:93:59:5b:8d:4a:7e:8e:bc:d0:bd:4c:
                    37:31:65:76:b3:a9:db:cb:c9:4c:bb:25:55:85:c5:
                    57:d5:93:46:a3:99:75:33:9f:e0:b1:79:de:c5:fb:
                    54:0d:d7:5a:8d:b2:9e:88:e6:12:27:48:0a:2f:c0:
                    9f:e5:3d:29:53:01:bb:f0:05:23:bb:85:88:cc:27:
                    9b:ad:96:18:e1:a4:79:66:be:18:b8:2e:eb:0a:cb:
                    fa:65:88:14:ed:7f:d6:c4:d2:ec:46:97:9c:ae:c9:
                    88:2b:f5:57:6e:63:66:89:50:d2:87:11:19:db:8c:
                    98:72:db:45:66:cf:c1:87:72:db:f2:18:9e:5d:a6:
                    c7:59:e8:6d:01:2f:1c:b5:fd:66:c8:13:03:25:cf:
                    36:94:de:6e:2d:d2:0c:ba:45:aa:3b:8e:e7:d5:c4:
                    ed:19:d1:82:3c:6b:d5:e3:6a:ed:31:9e:91:f6:53:
                    f0:77:ab:30:f5:4f:7f:96:f1:50:0d:26:10:4d:ae:
                    7d:64:38:26:4d:9a:2b:05:af:b5:8d:32:8d:12:a0:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:8F:38:14:66:12:FC:44:EA:6F:0B:56:7B:40:63:E0:53:84:10
            X509v3 Authority Key Identifier:
                keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:3b:60:66:0d:6d:6c:64:6e:1d:cc:38:0f:50:61:32:79:
         6c:f4:89:93:1a:5a:26:19:73:2d:d3:a6:7e:fd:22:2d:2e:59:
         31:48:d1:6e:b5:8f:03:20:76:32:61:64:3a:5c:32:39:51:8d:
         d2:29:67:71:e3:06:2a:93:99:53:af:ad:e1:b7:23:cc:8d:25:
         8a:38:3c:08:b8:26:3d:ba:98:a8:33:a7:bc:af:71:a5:27:d8:
         85:96:de:53:a9:b5:cb:b3:3b:6f:cc:3d:72:24:e1:8f:da:67:
         56:88:e9:90:68:9c:87:51:c3:f9:19:59:b4:21:25:00:a3:ef:
         ef:75:88:aa:c4:57:71:c0:2b:15:70:10:ba:35:b6:ca:ad:b1:
         19:e9:2a:45:39:f6:c0:f9:76:5e:1a:cd:87:3f:d5:07:ea:71:
         6d:fc:4b:54:d9:e4:95:b4:1a:4b:cc:e9:96:d6:7f:4a:b7:c3:
         b4:33:ac:52:2b:db:e5:bd:b3:05:d2:51:22:71:76:4d:d5:1e:
         c3:8e:d6:c1:a4:ba:0a:86:35:83:3e:92:08:7b:35:a6:82:ef:
         01:05:97:58:59:8b:f7:c4:7d:52:3d:91:04:8f:02:4f:d0:1f:
         dd:37:60:47:2f:5b:0d:a7:50:26:42:7a:bd:e7:8e:70:a5:b8:
         30:d7:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:43 2025 by rpki-client